ChangeMaker Supply Chain Security

We kick off our ChangeMaker series with Socket CEO Feross Aboukhadijeh. In this conversation, you’ll hear Feross’ views on how the status quo of supply chain security creates lots of noise and developer frustration while missing far too many actual vulnerabilities.

Thank you to Feross not only for the great conversation but for his contributions to this list of relevant links:

Socket Security

Socket for GitHub

Mimoto

Third npm protestware: ‘event-source-polyfill’ calls Russia out

What’s really going on in your node_modules folder?

Introducing Socket Dependency Overview

Dev corrupts NPM libs ‘colors’ and ‘faker’ breaking thousands of apps